求助~~~
用云+H3C WAC380-30做portal认证,客户端连接wifi提示:由于商户网络配置原因,导致联网失败。详情60013 重定向URI失败。请问该如何排查?
#
portal host-check enable
portal user log enable
portal free-rule 2346257224 destination open.weixin.qq.com
portal free-rule 2346257225 destination ip any tcp 5223
portal free-rule 2346257226 destination ip 114.114.114.114 255.255.255.255
portal free-rule 2346257227 destination ip any udp 53
portal free-rule 2346257228 destination ip any tcp 53
portal free-rule 2346257229 destination oasisauth.h3c.com
portal free-rule 2346257230 destination short.weixin.qq.com
portal free-rule 2346257231 destination mp.weixin.qq.com
portal free-rule 2346257232 destination long.weixin.qq.com
portal free-rule 2346257233 destination dns.weixin.qq.com
portal free-rule 2346257234 destination minorshort.weixin.qq.com
portal free-rule 2346257235 destination extshort.weixin.qq.com
portal free-rule 2346257236 destination szshort.weixin.qq.com
portal free-rule 2346257237 destination szlong.weixin.qq.com
portal free-rule 2346257238 destination szextshort.weixin.qq.com
portal free-rule 2346257239 destination isdspeed.qq.com
portal free-rule 2346257240 destination ***.***
portal free-rule 2346257241 destination long.open.weixin.qq.com
portal free-rule 2346257242 destination res.wx.qq.com
portal free-rule 2346257243 destination wifi.weixin.qq.com
portal free-rule 2346257244 destination ***.***
portal free-rule 2346257245 destination ***.***
portal free-rule 2346257246 destination ***.***
portal free-rule 2346257247 destination ***.***
portal safe-redirect enable
portal safe-redirect method get post
portal safe-redirect user-agent Android
portal safe-redirect user-agent CFNetwork
portal safe-redirect user-agent CaptiveNetworkSupport
portal safe-redirect user-agent MicroMessenge
portal safe-redirect user-agent MicroMessenger
portal safe-redirect user-agent Microsoft
portal safe-redirect user-agent Mozilla
portal safe-redirect user-agent WeChat
portal safe-redirect user-agent iPhone
portal safe-redirect user-agent micromessenger
#
portal web-server tyhk-wifi-guest
url http://oasisauth.h3c.com/portal/protocol
server-type oauth
url-parameter template_id value 642166
if-match user-agent CaptiveNetworkSupport redirect-url http://oasisauth.h3c.com/generate_404
if-match user-agent Dalvik/2.1.0(Linux;U;Android7.0;HUAWEI redirect-url http://oasisauth.h3c.com/generate_404
if-match original-url http://10.168.168.168 temp-pass
if-match original-url http://captive.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol
if-match original-url ***.***/wifi/echo temp-pass redirect-url http://oasisauth.h3c.com/generate_404
if-match original-url http://www.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol
#
portal local-web-server http
#
ip http enable
ip https enable
(0)
最佳答案
使用浏览器打开此页面,查看此页面的url中有此字段 errorCode=60013
当数据报文转发位置配置在AP上,且用户进行Portal第三方认证时,client和AP通过公网直接与第三方认证服务器进行报文交互,不会经过AC。但是第三方认证服务器在返回报文时会要求client访问AC,而client是不知道AC的IP地址的,因此需要通过配置AC的接口来让客户端获得AC的IP地址,以便客户端访问AC。
在全局模式下配置Portal认证时客户端访问AC的接口为vlan-interface 10(AC上三层接口)
<Sysname> system-view
[Sysname] portal client-gateway interface vlan-interface 10
(0)
已测通,感谢。
放通到业务网关流量
portal client-gateway interface Vlan-interface xx
(1)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
已测通,感谢。